Video Translation

PendingAudited by VirusTotal on May 11, 2026.

Overview

No VirusTotal analysis has been recorded yet. File reputation checks will appear here once the artifact hash has been scanned.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The actual downloader and TTS behavior depends on external code outside this package.

Why it was flagged

Core functionality depends on third-party GitHub skill directories that are not included in the reviewed artifact and are not pinned to a specific version or commit.

Skill content
clone or copy the `skills/youtube-downloader` directory from [crazynomad/skills] ... clone or copy the `skills/tts` directory from [NoizAI/skills]
Recommendation

Review and pin the external dependencies before use, and avoid letting the agent install or update them without confirmation.

What this means

The skill may fail or may depend on an unreviewed script supplied from somewhere else.

Why it was flagged

The workflow references a local helper script, but the supplied manifest contains only SKILL.md, so that helper is not available for review in this artifact set.

Skill content
bash skills/video-translation/scripts/replace_audio.sh --video original_video.mp4 --audio dubbed.wav --output final_video.mp4
Recommendation

Use only after confirming the referenced script exists, is from a trusted source, and does only the expected ffmpeg-style audio replacement.

What this means

Running the workflow executes local code and creates media files on the machine.

Why it was flagged

The skill’s normal workflow runs local shell scripts. This is expected for video/TTS processing, but users should notice that execution occurs through helper scripts.

Skill content
bash skills/tts/scripts/tts.sh render --srt translated.srt --voice-map voice_map.json --backend noiz --auto-emotion --ref-audio-track original_video.mp4 -o dubbed.wav
Recommendation

Run it only with trusted helper scripts, avoid elevated privileges, and confirm input/output paths before execution.

What this means

A Noiz API key may grant paid or account-linked access if misused.

Why it was flagged

The skill requires a provider API key for TTS even though registry metadata declares no primary credential or required env vars.

Skill content
`NOIZ_API_KEY` configured: `bash skills/tts/scripts/tts.sh config --set-api-key YOUR_KEY`
Recommendation

Use a scoped/revocable API key if possible, keep it out of logs and chat history, and revoke it if exposed.

What this means

The original video, audio, or voice characteristics may be processed by the TTS provider.

Why it was flagged

The workflow uses an external TTS backend with the original video/audio as a reference, but the artifact does not describe provider-side data handling or retention.

Skill content
The Noiz backend automatically aligns ... pass the original video file to `--ref-audio-track`
Recommendation

Use only media you are allowed to share with the provider, and review Noiz privacy and retention terms before processing sensitive videos.

What this means

The generated video could sound like a real person and may mislead others if shared without disclosure.

Why it was flagged

The skill explicitly supports voice cloning from the original speaker, which is part of dubbing but can affect speaker identity and consent.

Skill content
To ensure the cloned voice matches the original speaker's exact tone and emotion for each sentence
Recommendation

Obtain appropriate permission, label dubbed outputs clearly, and avoid using the workflow for impersonation.